Static task
static1
Behavioral task
behavioral1
Sample
36de039c14c8ac577d7c52d0053ec170_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
36de039c14c8ac577d7c52d0053ec170_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36de039c14c8ac577d7c52d0053ec170_JaffaCakes118
-
Size
114KB
-
MD5
36de039c14c8ac577d7c52d0053ec170
-
SHA1
3bb5b8bf3d21e1ceefcd636f9a65d50c54ac6504
-
SHA256
e77d4e03000b5391aeb480da1b1904a66280b926bd1650727bd62a69fc7ef060
-
SHA512
8e7531af06567cc54266e071abe0ab05db41e51b545d66a44ba5b76b92760206fbdbb535d3da1a4f83f7f7177a9f5a6d095c0c24e37096f925ab851c22806176
-
SSDEEP
3072:TGykuJmfuKWhfgkaj/lVId8HQp++ODxvc:zTN2nHQp++Od
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36de039c14c8ac577d7c52d0053ec170_JaffaCakes118
Files
-
36de039c14c8ac577d7c52d0053ec170_JaffaCakes118.exe windows:5 windows x86 arch:x86
68d922abba0a97e29e6b98e39f41d175
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetCommandLineW
GlobalFindAtomA
lstrcmpiA
DeleteFileA
SetCurrentDirectoryA
GetCurrentProcessId
MulDiv
RemoveDirectoryA
GetProcessHeap
RemoveDirectoryW
GetWindowsDirectoryA
GetTickCount
GlobalFindAtomW
QueryPerformanceCounter
GetModuleHandleW
lstrcmpiW
IsDebuggerPresent
GetCurrentThreadId
lstrcmpA
GetStartupInfoA
GetVersion
CopyFileA
GetCurrentProcess
GetCurrentThread
lstrlenA
lstrlenW
DeleteFileW
GetDriveTypeA
GetConsoleOutputCP
VirtualAlloc
VirtualFree
GetACP
GetThreadLocale
GetUserDefaultLangID
GetModuleHandleA
GetCommandLineA
gdi32
SetTextColor
CreatePen
SelectPalette
GetDeviceCaps
CreateFontIndirectA
SelectObject
SetStretchBltMode
CreateCompatibleDC
RectVisible
SetPixel
CreateSolidBrush
PatBlt
GetTextMetricsA
GetStockObject
DeleteDC
GetPixel
SetTextAlign
CreatePalette
SaveDC
DeleteObject
SetMapMode
GetClipBox
LineTo
GetObjectA
RestoreDC
user32
GetSystemMetrics
GetParent
GetDesktopWindow
CharNextA
TranslateMessage
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ